[mod-security-users] Requested Range Not Satisfiable?

[hanj <ma...@as...>]

Hello

I just recently started seeing this weird error coming from
mod_security. First a little background. I have a web site that serves
MP3s to the public. Unfortunately, it's been victim to some form of DoS
where I get hundreds of requests for the same MP3 in a short span,
which pretty much hoses my Apache connections.

To counter this I add mod_limitipconn and after rejection I send them
to a error.htm stating that they've exceeded the maximum amount of
downloads at a given time. This has been working great for months, but
I did recently upgrade apache (I'm sure this is related).

Lately, I've been seeing the following when users get rejected and sent
to error.htm

[Fri Jan 11 02:35:45 2008] [error] [client xxx.xxx.xxx.xxx]
ModSecurity: Output filter: Error while forwarding response data (-3):
Unknown error 4294967293 [hostname "www.domain.com"] [uri "/error.htm"]
[unique_id "DQR5FULbO5UAAENMqT8AAAAA"] [Fri Jan 11 02:35:45 2008]
[error] [client xxx.xxx.xxx.xxx] ModSecurity: Output filter: Error
while forwarding response data (-3): Unknown error 4294967293 [hostname
"www.domain.com"] [uri "/error.htm"] [unique_id
"DQSrdkLbO5UAAA56uIcAAAAC"]

Now, if I manually go to error.htm, I do not trigger this error. Here
is a output of the modsec_audit.log

--f5a8506e-A--
[11/Jan/2008:02:35:45 --0700] DQSrdkLbO5UAAA56uIcAAAAC xxx.xxx.xxx.xxx
1809 xxx.xxx.xxx.xx 80 --f5a8506e-B--
GET /error.htm HTTP/1.0
Host: www.domain.com
Referer: http://www.domain.com/mp3s/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Range: bytes=2427674-
Accept: */*
Pragma: no-cache
Cache-Control: no-cache
Connection: close

--f5a8506e-F--
HTTP/1.1 416 Requested Range Not Satisfiable
Connection: close
Content-Type: text/html; charset=iso-8859-1

--f5a8506e-H--
Message: Output filter: Error while forwarding response data (-3):
Unknown error 4294967293 Stopwatch: 1200044145683318 11486 (579 2892
10512) Producer: ModSecurity v2.1.2 (Apache 2.x)
Server: Apache

--f5a8506e-Z--


Requested Range Not Satisfiable? What does that mean?

My versions:
apache-2.2.6-r7
mod_security-2.1.2
mod_limitipconn-0.22-r1

Thanks much.
hanji